OSWA: Wireless Auditing LiveCD/LiveUSB

[Auditing of WiFi (802.11), Bluetooth and RFID]

source: http://oswa-assistant.securitystartshere.org/

Description

The OSWA-Assistant™ is a self-contained, freely downloadable, wireless-auditing toolkit for both IT-security professionals and End-users alike.

This toolkit is our contribution to the wireless security/auditing community and, as the "Assistant" moniker implies, and is designed for the following groups of people:

• IT-security auditors and professionals who need to execute technical wireless security testing against wireless infrastructure and clients;
• IT professionals who have responsibility for ensuring the secure operation and administration of their organization's wireless networks;
• SME (Small & Medium Enterprise) and SOHO (SmallOffice-HomeOffice) businesses who do not have either the technical expertise or the resources to employ such expertise to audit their wireless networks;
• Non-technical-users who run wireless networks at home and who would like to audit the security of their wireless home networks and laptops but don't know how.

Features

The OSWA™-Assistant is a no-Operating-System-required standalone toolkit which is solely focused on wireless auditing. As a result, in addition to the usual WiFi (802.11) auditing tools, it also covers Bluetooth and RFID auditing. Using the toolkit is as easy as popping it into your computer's CDROM and making your computer boot from it!

Technical professionals will easily be able to use the traditional menu-driven approach right off the bat as the arrangement of the menus is much more organized and logical than many other LiveCDs, as well as the presence of tools which don't just help with 802.11 (WiFi) auditing but also Bluetooth and RFID auditing as well.

Non-technical Home-owners and SOHO users are also catered to via the ActivityMap™ help system. Via a web interface, the ActivityMap™ helps non-technical or non-IT-security professionals to conduct basic security testing of their own wireless networks in a methodical and consistent manner. Using ThinkSECURE's 5E Methodology as a framework, the ActivityMap™ guides the user through the process of determining and proving if his/her network is secure or not.

By providing the ActivityMap, we hope to help end-users by providing them with a means to audit and prove if their networks are vulnerable and thus take the appropriate countermeasures to reduce their vulnerability exposure. By empowering the man-on-the-street to secure his/her own wireless network, our intention is that there will be less vulnerable networks around for evil-intentioned people to take advantage of, thus raising the overall national wireless security defence posture.

Tools

802.11 Tools

• Aircrack-ng 1.0-beta2 suite
• Airfart
• Airsnort
• Airsnarf
• AP-Hopper
• AP-Radar
• AP-Utils
• Asleap
• ChopChop
• CoWPAtty
• HostAPD
• Hotspotter
• Karma
• Kismet
• Leapcracker
• MDK3-v4
• MoocherHunter™
• Probemapper™
• SSIDsniff
• Wardrive
• Wavemon
• WEPlab
• Wi-Find
• Wi-Spy Tools
• WifiTap
• WifiZoo
• WPA-attack (Attacker)
• WPA Supplicant
• Wireless Extensions & Wireless Tools package (iwconfig/iwpriv, etc)

Bluetooth Tools

• Bluebugger
• Bluediving
• Blueprint
• Bluescanner
• Bluesnarfer
• BT-Audit
• Btfs
• Btscanner
• Carwhisperer
• Ghettotooth
• Obexpush-dos
• HIDattack
• Redfang
• T-Bear
• Ussp-push
• Bluez Bluetooth package with hcitool/hciconfig

RFID Tools

• Rfdump
• Rfidtool

Current Version: 0.9.0.5e (August 8, 2008)
Download: http://securitystartshere.org/page-t...t-download.htm

Burp Suite

http://www.portswigger.net/suite/

Burp Suite is an integrated platform for attacking web applications. It contains all of the Burp tools with numerous interfaces between them designed to facilitate and speed up the process of attacking an application. All tools share the same robust framework for handling HTTP requests, persistence, authentication, downstream proxies, logging, alerting and extensibility. Burp Suite allows you to combine manual and automated techniques to enumerate, analyse, scan, attack and exploit web applications. The various Burp tools work together effectively to share information and allow findings identified within one tool to form the basis of an attack using another.
Key features unique to Burp Suite include:

• Detailed analysis and rendering of requests and responses.
• One-click transfer of interesting requests between tools.
• Ability to "passively" spider an application in a non-intrusive manner, with all requests originating from the user's browser.
• FIPS-compliant statistical analysis of session token randomness.
• Utilities for decoding and comparing application data.
• Support for custom client and server SSL certificates.
• Extensibility via the IBurpExtender interface.
• Centrally configured settings for downstream proxies, web and proxy authentication, and logging.
• Tools can run in a single tabbed window, or be detached in individual windows.
• Runs in both Linux and Windows.

New features in version 1.2 include:

• Site map showing information accumulated about target applications in tree and table form.
• Fully fledged web vulnerability scanner. [Pro version only]
• Suite-level target scope configuration, driving numerous individual tool actions.
• Display filters on site map and Proxy request history.
• Ability to save and restore state. [Pro version only]
• Suite-wide search function.
• Support for invisible proxying.

Burp Suite is a Java application, and runs on any platform for which a Java Runtime Environment is available. It requires version 1.5 or later.

Burp Suite contains the following tools:

• Proxy - an intercepting HTTP/S proxy server which operates as a man-in-the-middle between the end browser and the target web application, allowing you to intercept, inspect and modify the raw traffic passing in both directions.
• Spider - an intelligent application-aware web spider which allows complete enumeration of an application's content and functionality.
• Scanner [professional version only] - an advanced tool for performing automated discovery of security vulnerabilities in web applications.
• Intruder - a highly configurable tool for automating customised attacks against web applications, such as enumerating identifiers, harvesting useful data, and fuzzing for common vulnerabilities.
• Repeater - a tool for manually manipulating and re-issuing individual HTTP requests, and analysing the application's responses.
• Sequencer - a tool for analysing the quality of randomness in an application's session tokens or other important data items which are intended to be unpredictable.
• Decoder - a tool for performing manual or intelligent decoding and encoding of application data.
• Comparer - a utility for performing a visual "diff" between any two items of data, normally pairs of related requests and responses.

Using Burp Suite

When Burp Suite is launched, Burp Proxy is started by default on port 8080 of the local loopback interface. By setting a web browser to use this as its proxy server, all web traffic can be intercepted, inspected and modified.


...
...
...

Current version: 1.2

Home Page: http://www.portswigger.net/suite/
Download: http://www.portswigger.net/suite/download.html
Help: http://www.portswigger.net/suite/help.html
Screenshots: http://www.portswigger.net/suite/screenshots.html